Set up target for NIST CSF framework

task australia Updated Sep 10, 2026 1 min read setup-target-use-nist-csf-framework.md

Raw file servicenow.com

Set up a target record to use with NIST CSF framework after you've identified a target.

Before you begin

NIST CSF Role required: none. sn_irm_nist_csf.risk_executive or sn_irm_nist_csf.security_officer

Procedure

Navigate to All > NIST CSF > Framework Profiling > Orient Targets.
Search for the target using the Name or Profile fields.
Open the target record.
Click the Framework field and select NIST CSF.
Click Update.
In the Targets list, open the record again.
Verify the information in the Target form.

In the NIST CSF section, fill out the fields (see table for field descriptions).

Field	Description
Critical	Check box that indicates the target is focused on during cyber risks. NIST CSF recommends that organizations prioritize cybersecurity activities for critical targets
Tier	Tier for a target that describes its capability to address cyber risks.

Click the Activities related list and validate the activities that are associated with the target.

Parent Topic:Align and prioritize cybersecurity activities

51 lines · 2.0 KB Wrap lines

---
title: Set up target for NIST CSF framework
description: Set up a target record to use with NIST CSF framework after you've identified a target.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/grc-common-functions/setup-target-use-nist-csf-framework.html
release: australia
product: GRC Common Functions
classification: grc-common-functions
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Align and prioritize cybersecurity activities, Process overview, NIST CSF Use Case Accelerator, GRC use case accelerators, Common GRC features, Governance, Risk, and Compliance]
---

# Set up target for NIST CSF framework

Set up a target record to use with NIST CSF framework after you've identified a target.

## Before you begin

NIST CSF Role required: none. sn\_irm\_nist\_csf.risk\_executive or sn\_irm\_nist\_csf.security\_officer

## Procedure

1. Navigate to **All** &gt; **NIST CSF** &gt; **Framework Profiling** &gt; **Orient Targets**.

2. Search for the target using the **Name** or **Profile** fields.

3. Open the target record.

4. Click the **Framework** field and select **NIST CSF**.

5. Click **Update**.

6. In the Targets list, open the record again.

7. Verify the information in the Target form.

8. In the NIST CSF section, fill out the fields \(see table for field descriptions\).

|Field|Description|
|-----|-----------|
|Critical|Check box that indicates the target is focused on during cyber risks. NIST CSF recommends that organizations prioritize cybersecurity activities for critical targets|
|Tier|Tier for a target that describes its capability to address cyber risks.|

9. Click the **Activities** related list and validate the activities that are associated with the target.

**Parent Topic:**[Align and prioritize cybersecurity activities](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/align-prioritize-activities.md)